10 matches found
Input validation
libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that...
5CVSS7.5AI score0.00713EPSS
SaveExploits0References3Affected Software1
20